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Amendments to the Claims : 

The following listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, comprising: 

a receiving p art that receives a personal certificate; 

a verifydng p art that verifies the received personal certificate based on a digital 
signature technique; 

a n extracting part that extracts at least one of predetermined elements in a hi e rarchy of 
arsubject name included in the received personal certificate; and 

a determination p art that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the personal 
certificate is successfully verified, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an e l e m e nt allocat e d for r e pr e senting a purpose of op e ration to b e op e rat e d by th e 
hold e r of th e p e rsonal c e rtificate . 

2. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 1, wherein the at least one of the predetermined elements is an 
organizational unit name of a predetermined hierarchy of the subject name. 

3. (Canceled) 

4. (Currently Amended) A web server computer system comprising: 
a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 
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an extracting part that extracts at least one of predetermined elements in a hi e rarchy of 
a subject name included in the received personal certificate; and 

a determination part that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the received 
personal certificate is successfully verified, 

wherein the predetermined elements include s an element allocated for representing a 
proiect an e l e m e nt allocated for roproGonting a purpos e of operation to b e op e rated by th e 
holder of the personal c e rtificat e. 

5. (Currently Amended) A web server computer system comprising: 

a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 

an allocating part that allocates a session identifier when the received personal 
certificate is successfully verified; 

a n extracting part that extracts at least one of predetermined elements in a hierarchy of 
a-subject name included in the received personal certificate; 

a determination p art that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the received 
personal certificate is successfully verified; and 

a memory_part-that stores the determined access right associated with the session 
identifier, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an e lem e nt allocat e d for repr e senting a purpos e of operation to be operated by th e 
holder of the personal c e rtificat e. 
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6. (Original) The web server computer system according to claim 5, wherein the 
at least one of the predetermined elements is an organizational unit name of a predetermined 
hierarchy of the subject name. 

7. (Canceled) 

8. (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, which r e c e iv e s a personal certificat e in which a pr e d e t e rminod e lem e nt 
of a subject name repres e nts an organization to which a hold e r of the certificate b e long s and 
an attribute oth e r than a p e rsonal ID so as to proc e ss th e subj e ct nam e , the apparatus 
comprising: 

a receiving p art that receives the personal certificate; 

a n extracting part that extracts aat least one predetermined element in a hi e rarchy of a 
subject name included in the received personal certificate; and 

a determination part that determines an access right at least based on an organization 
to which a holder belongs and an attribute other than a personal ID represented by a value of 
the at least one p redetermined element, 

wherein the at least one p redetermined element in a hi e rarchy of the subject name 
represents a project purpos e of operation to bo operat e d by the holder of th e p e rsonal 
c e rtificat e. 

9. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents that the holder of the certificate is not a member of 
an organization represented by the organization name and that the holder cooperates with the 
organization. 
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10. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents a project name in which the holder takes part. 

1 1 . (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents a cooperating organization name which cooperates 
with an organization represented by the organization name and to which the holder belongs. 

12. (Canceled) 

13. (Canceled) 

14. (Canceled) 

15. (Currently Amended) A method for processing a subject name included in a 
personal certificate, comprising the st e ps of : 

receiving a personal certificate; 

verifying the received personal certificate based on a digital signature technique; 

extracting at least one of predetermined elements in a hierarchy of a subject name 
included in the received personal certificate; and 

determining an access right of a holder of the personal certificate based on a value of 
the at least one predetermined element when the personal certificate is successfiilly verified, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an el e m e nt allocated for roprosonting a purpos e of op e ration to bo op e rat e d by th e 
hold e r of th e p e rsonal certificat e. 

16. (Currently Amended) A method for processing a subject name included in a 
personal certificate, which r e ceives a personal certificat e in which a pr e d e t e rmin e d e l e m e nt of 
a subject nam e r e pres e nts an organization to which a hold e r of the personal certificat e b e longs 
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and an attribute oth e r than a p o rsonal ID go as to process th e subj e ct nam e , the method 
comprisin g the stops of : 

receiving the personal certificate; 

extracting aat least one predetermined element in a hierarchy of a subject name 
included in the received personal certificate; and 

determining an access right at least based on an organization to which a holder 
belongs and an attribute other than a personal ID represented by a value of the at least one 
predetermined element, 

wherein the at least one p redetermined element in a hierarchy of the subject name 
represents a proiect p urpos e of op e ration to b e operat e d by the holder of the personal 
ccrtificato . 

1 7. (Currently Amended) A storage medium readable by a computer, the storage 
medium storing a program of instructions executable by the computer to perform a function 
for processing a subject name included in a personal certificate, the fiinction comprising the 
steps of: 

receiving a personal certificate; 

verifying the received personal certificate based on a digital signature technique; 

extracting at least one of predetermined elements in a hi e rarchy of a subject name 
included in the received personal certificate; and 

determining an access right of a holder of the personal certificate based on a value the 
at least one predetermined element when the personal certificate is successfully verified, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an e l e m e nt allocated for repr e s e nting a purpos e of op e ration to b e op e rat e d by th e 
hold e r of th e p e rsonal c e rtificate . 
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1 8. (Currently Amended) A storage medium readable by a computer, the storage 
medium storing a program of instructions executable by the computer to perform a function 
for processing a subject name included in a personal certificate, which r e c o ives a personal 
certificate in which a pr e d e termin e d e lem e nt of a subject nam e represents an organization to 
which a hold e r of the personal certificate belongs and an attribut e oth e r than a p e rsonal ID so 
as to process th e subject nam e , the fiinction comprising th e st e ps of : 

receiving the personal certificate; 

extracting aat least one predetermined element in a hierarchy of a subject name 
included in the received personal certificate; and 

determining an access right at least based on an organization to which a holder 
belongs and an attribute other than a personal ID represented by a value of the at least one 
predetermined element, 

wherein the at least one p redetermined element in a hierarchy of the subject name 
represents a proiect p urposo of operation to bo op e rated by the hold e r of th e p e rsonal 
c e rtificat e. 

19. (Canceled) 

20. (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, comprising: 

a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 

an extracting part that extracts at least one of predetermined elements in a hierarchy of 
a subject name included in the received personal certificate; and 
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a determination p art that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the personal 
certificate is successfiilly verified, 

wherein the predetermined elements includes an organizational unit name allocated 
for representing a project name and a common name allocated for representing a purpose of 
operation of the project. 

21 . (New) The apparatus according to claim 1, wherein the predetermined 
elements further include an element allocated for representing a purpose of operation to be 
operated by the holder of the personal certificate. 

22. (New) The web server computer system according to claim 4, wherein the 
predetermined elements fiirther include an element allocated for representing a purpose of 
operation to be operated by the holder of the personal certificate. 

23. (New) The web server computer system according to claim 5, wherein the 
predetermined elements fiirther include an element allocated for representing a purpose of 
operation to be operated by the holder of the personal certificate. 

24. (New) The apparatus according to claim 8, wherein the at least one 
predetermined element in a hierarchy of the subject name fiirther represents a purpose of 
operation to be operated by the holder of the personal certificate. 

25. (New) The method of claim 15, wherein the predetermined elements fiirther 
include an element allocated for representing a purpose of operation to be operated by the 
holder of the personal certificate. 

26. (New) The method of claim 16, wherein the at least one predetermined 
element fiirther represents a purpose of operation to be operated by the holder of the personal 
certificate. 
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27. (New) The storage medium of claim 17, wherein the predetermined elements 
further include an element allocated for representing a purpose of operation to be operated by 
the holder of the personal certificate. 

28. (New) The storage medium for storing a program of instructions of claim 18, 
wherein the at least one predetermined element further represents a purpose of operation to be 
operated by the holder of the personal certificate. 



